Custom Query (2152 matches)
Results (1441 - 1443 of 2152)
Ticket | Resolution | Summary | Owner | Reporter |
---|---|---|---|---|
#133 | fixed | Security hole - search package/group (WUI & REST) | rgrp | dread |
Description |
Using WUI or REST interface you can search packages and groups without authorization being checked. On the REST interface you can also read all the attributes of the packages using the 'all-fields' option. Can be fixed using more advanced query to check authz. |
|||
#268 | duplicate | Select groups in Package edit form | rgrp | dread |
#2489 | fixed | Select publisher when dataset created via 'publisher > add dataset' | johnglover | johnglover |
Description |
When clicking 'add dataset' on a publisher/group page, the new dataset form should select the appropriate group. |
Note: See TracQuery
for help on using queries.